Privacy information act

WHO WE ARE

The Data Controller is: Porto di Livorno 2000 S.r.l., represented by its legal representative Matteo Savelli
The Data Controller can be contacted by email at segreteriagenerale@pec.portolivorno2000.it

PURPOSES AND LEGAL BASES OF PROCESSING

Porto di Livorno 2000 S.r.l. collects — including verbally — and may process your common personal data (personal details, address, email, mobile and landline phone numbers, vehicle registration plate, etc.), even without your specific consent, in order to fulfil contractual, legal and tax obligations connected with the services provided, or for the performance of the contractual or pre-contractual relationship for the supply of services. Processing may also be carried out in fulfilment of obligations set out by EU legislation, laws and acts having the force of law, orders of the Public Security and/or Judicial Authority (e.g. Legislative Decree No. 50/2016, Legislative Decree No. 81/2008, Legislative Decree No. 231/2001, Regulation (EU) No. 1177/2010 on passenger rights — including the provision of assistance to persons with reduced mobility — Port Authority orders, Harbour Master's Office orders, requirements of the Public Security and/or Judicial Police Authority). Data will also be processed for the management of contractual defaults, the sending of payment demands, dispute management and debt recovery, including through legal proceedings.
Failure to provide personal data for purposes related to legal, contractual or pre-contractual obligations will make it impossible to provide/receive the requested service.
Porto di Livorno 2000 S.r.l. operates a video-surveillance system in its concession areas, active 24 hours a day. The images are processed using electronic tools and in compliance with personal data protection legislation and the Italian Data Protection Authority's General Provision of 8 April 2010. The lawful basis for processing is the pursuit of the Data Controller's legitimate interest, as well as compliance with obligations relating to the security checks required by EU, national and local legislation on port and port facility security, for access to designated areas (e.g. EC Regulation No. 725/2004, EU Directive No. 65/2005, Legislative Decree No. 203/2007, Port Authority orders, Harbour Master's Office orders).

PROCESSING METHODS

Data will be entered into an electronic database and/or kept in paper archives.
The data will not be subject to automated decision-making, nor will any form of profiling be carried out.

DATA RECIPIENTS

Personal data may be accessed by the company's collaborators and employees, as authorised and duly instructed data processors.
Data may be disclosed to external parties (e.g. tax advisors, lawyers, IT service providers, consulting and debt-recovery companies, insurance companies, etc.) where necessary for the fulfilment of contractual obligations, as well as to public bodies pursuant to legal provisions (e.g. Judicial Authority, Public Security Authority, Port System Authority, Harbour Master's Office). These parties will act either as independent Data Controllers or will be appointed as Data Processors under a specific contract or legal instrument.
Data will not be disseminated, nor transferred to third countries or international organisations.

DATA RETENTION PERIOD

The company will retain data for 10 years, or for the time necessary to achieve the purposes outlined above, for tax, accounting and legal requirements, and also to respond to any requests you may make to access or recover your data. Data processed for security checks is retained for a period not exceeding that defined in the Port Facility Security Plan.
Video-surveillance footage will be retained for 7 days for the purpose of carrying out the port security checks required by current legislation and the security plan. For reasons connected with the protection of its rights, whether out of court or in legal proceedings, personal data will be retained for the time reasonably necessary for such purposes.

DATA SUBJECT RIGHTS

You have the right to exercise the rights set out in Articles 15–21 of EU Regulation 2016/679, namely — in summary — to request from the company, using the contact details above, access to your data and its rectification or erasure, or the restriction of processing concerning you, or to object to its processing, in addition to the right to data portability.
You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
If the response to your requests is not satisfactory, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), based in Piazza Venezia n. 11 – 00187 Rome.